Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa
File:                     32372e302e3139362e302f32322d3234203d3e203539323838.roa (raw, json)
Hash identifier:          RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=
Subject key identifier:   F6:20:1A:C3:A8:3D:54:33:06:54:A6:7D:98:DF:18:B9:C8:19:55:24
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       3CFD430E4BE6BF980B29E5C74FE96BB4B4966D8C
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa
Signing time:             Wed 11 Jun 2025 17:00:00 +0000
ROA not before:           Wed 11 Jun 2025 16:55:00 +0000
ROA not after:            Wed 10 Jun 2026 17:00:00 +0000
asID:                     59288
IP address blocks:        27.0.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 12:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fd:43:0e:4b:e6:bf:98:0b:29:e5:c7:4f:e9:6b:b4:b4:96:6d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Jun 11 16:55:00 2025 GMT
            Not After : Jun 10 17:00:00 2026 GMT
        Subject: CN=F6201AC3A83D54330654A67D98DF18B9C8195524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:c7:ea:7f:4a:15:9a:ff:81:3e:4c:0a:a2:
                    9e:7e:03:6d:af:a5:98:9d:40:fb:45:93:94:16:07:
                    26:a2:7e:4a:22:67:2c:16:7e:ca:3f:30:af:00:53:
                    05:1e:86:6b:a1:56:5c:c5:a3:34:5c:12:e8:42:37:
                    46:5a:05:8f:e6:d0:44:f1:4d:13:75:1b:10:2d:72:
                    75:cb:38:14:f4:c9:a6:c4:d2:86:18:58:96:28:43:
                    bb:d6:49:93:3a:9c:c0:79:35:fc:0c:67:2c:9a:cd:
                    15:be:49:11:d3:b7:5f:5e:c0:28:d0:2c:f6:b1:08:
                    cb:f5:e2:60:7e:91:dc:df:28:8d:f7:d0:5b:d1:1d:
                    f3:fc:1a:b2:33:95:e1:9e:ab:ca:c8:8a:fc:36:aa:
                    db:3e:b8:cc:67:2a:de:d3:35:06:a8:27:90:bf:13:
                    15:72:8c:78:ec:41:66:6e:41:e8:4d:38:ed:95:31:
                    43:c0:73:72:e4:a7:f1:b3:45:e4:b6:f6:68:e0:7c:
                    4a:c2:a7:20:10:7d:66:9d:eb:26:bd:ff:34:96:b0:
                    ee:46:dc:a4:e3:07:14:ef:8a:5f:46:ee:e9:99:4f:
                    e1:c3:56:13:3c:25:d4:86:e2:3e:7d:34:fa:67:08:
                    d1:c2:2d:f8:41:1a:60:0b:94:4f:a8:d1:9e:35:10:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:1A:C3:A8:3D:54:33:06:54:A6:7D:98:DF:18:B9:C8:19:55:24
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139362e302f32322d3234203d3e203539323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:af:d1:da:30:bb:14:39:82:da:89:e8:5c:36:99:1a:71:f7:
         91:8b:14:d3:dd:31:24:22:90:4d:4a:c2:4f:08:47:b7:ae:3b:
         6b:5b:de:2d:bc:d8:d1:d5:8e:16:a8:4e:52:81:bb:2e:5d:08:
         58:23:95:7f:2c:a5:43:2e:78:c8:60:83:96:fc:44:57:8b:f9:
         35:d1:63:94:c0:dc:91:be:4c:29:58:c8:1f:ee:33:de:89:ae:
         68:f5:48:10:28:2c:e1:66:36:cf:d4:48:ec:6f:2f:1d:2c:6f:
         45:65:22:d2:8a:a9:7b:7c:c5:91:c4:93:c7:37:33:a1:b9:24:
         24:17:0f:d0:11:a3:04:03:05:9c:97:82:d4:3a:fe:1d:1e:87:
         dd:6f:74:63:28:7c:0b:5d:28:95:25:cb:12:12:95:54:cf:13:
         93:e8:2a:fc:55:4a:f2:55:ff:9b:d2:7a:8f:e5:91:33:8c:b6:
         4c:bb:83:43:c7:54:13:a0:07:72:8e:9f:11:ed:68:c7:d3:3a:
         a3:af:e8:d4:04:e5:80:a9:68:89:67:c8:5c:7d:9f:3b:ea:50:
         50:49:2e:6c:80:09:a1:d4:e3:c0:08:59:1d:c7:34:bc:5c:9a:
         73:d5:76:29:9d:82:fa:36:96:32:23:64:3e:02:1b:fe:8e:e6:
         75:7a:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:01:45 2025 by rpki-client